This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json) Hash identifier: Ts3hYQnK/6mPLvuYBk07QGTF6qS4YpTRev4YRxn1b8s= Subject key identifier: AA:D0:65:40:13:9F:8C:60:55:08:98:30:F6:22:12:79:48:71:A3:95 Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5 Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5 Certificate serial: 019AF276E2614D0DB1E0B1E9EED0C9D5A7EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft Manifest number: 0C66 Signing time: Sat 06 Dec 2025 07:01:08 +0000 Manifest this update: Sat 06 Dec 2025 07:01:08 +0000 Manifest next update: Sun 07 Dec 2025 07:01:08 +0000 Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: 0jgfhIQRPpc0ETX+RLxAS4dQWDXncucrB/qG7LG3FuY=) 2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e2:61:4d:0d:b1:e0:b1:e9:ee:d0:c9:d5:a7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5 Validity Not Before: Dec 6 07:01:08 2025 GMT Not After : Dec 7 07:01:08 2025 GMT Subject: CN=aad06540139f8c6055089830f62212794871a395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:73:33:a2:f5:08:64:73:7e:b1:94:7f:e4: 1b:0e:db:19:76:6d:df:da:d4:90:b3:5f:4a:e2:4e: 14:66:b5:ae:9e:c3:db:db:9f:8c:22:b1:df:0b:3c: 12:2c:32:40:40:fd:f1:6e:ee:e9:d7:78:6a:2d:cb: b7:1d:11:01:6c:f8:fd:7a:1d:f9:64:80:29:d7:b6: 22:1e:37:c8:83:41:33:5a:2e:f2:3f:05:69:a9:40: bd:9b:31:59:44:9b:44:f3:63:34:3d:87:6e:d3:42: 0b:2f:bb:71:6f:71:ab:51:c4:bd:cc:b3:cc:fb:89: 9d:27:ea:49:38:6f:3d:e9:5a:46:35:28:a1:d0:c3: d7:0f:2f:58:9b:d9:e5:b8:11:77:5c:a0:ac:b7:b7: fb:7a:54:34:15:4a:34:95:c3:08:eb:bc:6e:cf:03: 38:96:b0:96:09:d2:f1:08:f3:37:3e:b6:3a:90:dd: fd:26:bc:76:53:0a:2d:4c:9a:d5:78:c0:06:e5:f8: 18:4f:76:07:fd:51:1b:2b:00:cd:0a:bb:bd:bd:eb: 15:f1:e2:81:7c:38:14:7b:34:5b:16:c6:43:54:50: ec:31:aa:39:94:dd:38:93:7b:92:3c:16:c8:80:02: d7:44:e1:9d:6c:37:39:e3:a3:e4:42:5f:f4:5b:a0: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:65:40:13:9F:8C:60:55:08:98:30:F6:22:12:79:48:71:A3:95 X509v3 Authority Key Identifier: keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c0:38:5e:77:9c:89:94:55:44:ef:95:36:f8:ba:7a:20:67: ce:34:9e:da:fa:2a:be:21:6c:d6:4b:33:08:32:4e:db:0d:cd: c1:a7:8c:71:66:f9:81:e5:c5:42:b4:c5:cd:0f:42:e0:91:b1: 5b:b9:73:3e:83:5c:b6:2f:c6:d9:73:45:6e:99:59:b3:8a:52: 64:e6:db:aa:49:79:7b:20:56:ac:9c:bf:a7:ff:12:a2:e3:ae: df:4e:b8:57:59:d5:00:d8:95:68:6d:7b:11:b4:d1:28:94:57: 31:73:b0:b2:3e:37:53:b4:ef:aa:31:2c:fb:47:73:01:8f:d5: c6:db:1f:2e:9f:06:cc:87:14:10:6a:b4:77:9a:44:4b:25:c2: 27:0f:d2:87:02:70:da:81:ff:93:b6:34:3c:ed:27:31:09:b3: 58:11:f3:0b:12:ac:35:98:c1:c9:d6:7b:b1:3a:f6:8d:54:af: c8:ba:9e:4d:59:c7:86:6c:f6:06:2f:b4:1d:a5:2e:8e:c0:ce: e0:48:58:ff:84:28:d6:5b:5f:e9:f2:11:6f:f3:bd:98:30:2f: 0b:70:00:ba:1b:19:bd:d2:c5:42:f6:54:e6:38:ae:0e:84:8f: 26:33:16:06:3b:70:04:aa:d5:13:78:c8:eb:8b:25:d0:f0:31: d2:d5:7b:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduJhTQ2x4LHp7tDJ1afvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTAwNGVhMDUzOGM3M2MyM2EzZDFkZmRjMTIxZjBlNjAw YWNkZjUwHhcNMjUxMjA2MDcwMTA4WhcNMjUxMjA3MDcwMTA4WjAzMTEwLwYDVQQD EyhhYWQwNjU0MDEzOWY4YzYwNTUwODk4MzBmNjIyMTI3OTQ4NzFhMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD5zM6L1CGRzfrGUf+QbDtsZdm3f 2tSQs19K4k4UZrWunsPb25+MIrHfCzwSLDJAQP3xbu7p13hqLcu3HREBbPj9eh35 ZIAp17YiHjfIg0EzWi7yPwVpqUC9mzFZRJtE82M0PYdu00ILL7txb3GrUcS9zLPM +4mdJ+pJOG896VpGNSih0MPXDy9Ym9nluBF3XKCst7f7elQ0FUo0lcMI67xuzwM4 lrCWCdLxCPM3PrY6kN39Jrx2UwotTJrVeMAG5fgYT3YH/VEbKwDNCru9vesV8eKB fDgUezRbFsZDVFDsMao5lN04k3uSPBbIgALXROGdbDc546PkQl/0W6AmDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrQZUATn4xgVQiYMPYiEnlIcaOVMB8GA1UdIwQY MBaAFB+QBOoFOMc8I6PR39wSHw5gCs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDIt NDk2YWJlZTdjZTc5LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDItNDk2YWJlZTdjZTc5 LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsA4Xnec iZRVRO+VNvi6eiBnzjSe2voqviFs1kszCDJO2w3NwaeMcWb5geXFQrTFzQ9C4JGx W7lzPoNcti/G2XNFbplZs4pSZObbqkl5eyBWrJy/p/8SouOu3064V1nVANiVaG17 EbTRKJRXMXOwsj43U7TvqjEs+0dzAY/VxtsfLp8GzIcUEGq0d5pESyXCJw/ShwJw 2oH/k7Y0PO0nMQmzWBHzCxKsNZjBydZ7sTr2jVSvyLqeTVnHhmz2Bi+0HaUujsDO 4EhY/4Qo1ltf6fIRb/O9mDAvC3AAuhsZvdLFQvZU5jiuDoSPJjMWBjtwBKrVE3jI 64sl0PAx0tV7uA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:10 2025 by rpki-client